Senior Cyber Security Engineer
Location: Washington, D.C.; Hybrid (3 Days in office, after 90 Days in-person)
Status: Full-time; Exempt
Reports to: Head of Information Security
Direct Reports: None
Typical Work Hours: 8:30 a.m. to 5:00 p.m. Monday to Friday
Monex is a leading global financial solutions provider, offering a complete set of tools to support business growth and strategic financial operations.
We specialize in FX risk management and international payments, helping corporate and institutional clients design tailored FX solutions to navigate currency volatility with confidence. Our team of FX specialists implement well-considered currency strategies, offering dedicated support to help clients manage their payment needs – whether for goods, services, or direct investments.
In 2023, Monex facilitated $309 billion in FX turnover, managed $10.7 billion in assets, and processed 8.5 million transactions. With offices across North America (Canada, the US, and Mexico), Asia (Singapore), and Europe (the UK, Spain, and the Netherlands), we serve over 66,000 clients worldwide.
By combining global reach with deep local market expertise, Monex enhances businesses with a suite of financial solutions and FX market analysis to help optimize efficiency, mitigate currency risk, and protect margins in an increasingly complex financial landscape.
Job Overview
This is a hybrid role based in Washington, DC, with a mandatory requirement to work from the Washington, DC office three days per week.
As a Senior Cyber Security Engineer, you will play a senior, hands-on technical role in securing the organisation’s global cloud, identity, endpoint, network, and hybrid infrastructure. You will act as a technical authority for cyber security while remaining directly involved in the design, implementation, configuration, automation, troubleshooting, and improvement of security controls across Microsoft Azure, Microsoft Defender, Microsoft 365, Microsoft Entra ID, Intune, and on-premises environments. You will take ownership of complex security engineering initiatives from technical design through implementation and operational handover. You will also help define security standards and provide technical guidance to other engineers and technology teams.
The role has a global footprint and requires close collaboration with SOC, Infrastructure, IT Operations, and other technology teams across the USA, Europe, and other international locations.
Responsibilities
Design, implement, configure, and continuously improve security solutions across Microsoft Azure, Microsoft 365, Entra ID, Microsoft Endpoint Detection & Response (EDR/XDR), Intune, and hybrid environments.
Manage and optimise the Microsoft security stack, including Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender XDR, and Microsoft Sentinel.
Design and implement identity security controls including Conditional Access, Multi-Factor Authentication, Privileged Identity Management (PIM), Identity Governance, and Zero Trust controls.
Design and implement endpoint security configurations, including security baselines, compliance policies, encryption, application protection, and endpoint hardening.
Implement and maintain secure Azure landing zone, including Azure Policy, RBAC, PIM, Private Endpoints, NSGs, Azure Firewall, network segmentation, and secure connectivity.
Identify, investigate, and remediate security vulnerabilities, misconfigurations, identity risks, and weaknesses across cloud and hybrid environments.
Work closely with the SOC to investigate security incidents, improve security monitoring, tune detections, and enhance threat visibility.
Develop and maintain security automation using PowerShell, Python, APIs, Infrastructure as Code such as Terraform and Bicep, and CI/CD pipelines.
Define and maintain security engineering standards, security baselines, and implementation guidance.
Perform technical security reviews of new infrastructure, cloud services, applications, and architecture changes, and work with teams to remediate identified risks.
Troubleshoot complex security issues across cloud, identity, endpoint, network, authentication, and security platforms.
Evaluate new security technologies and capabilities through hands-on technical assessment and proof-of-concept activities.
Support internal and external audits, risk assessments, remediation activities, and regulatory requirements within a regulated environment.
Required Qualifications
10+ years of experience in Cyber Security Engineering, Cloud Security, Infrastructure Security, or a related security role.
Hands-on experience with Microsoft Sentinel, Microsoft Endpoint Detection & Response (EDR/XDR), Data Loss Prevention (DLP), Microsoft 365, Azure, and Microsoft Entra ID.
Experience implementing Conditional Access, PIM, Azure RBAC, Windows Hello for Business, Intune compliance policies, and identity security controls.
Experience with Infrastructure as Code (Terraform and/or Bicep), PowerShell and/or Python automation, and DevSecOps methodologies.
Strong understanding of vulnerability management, security hardening, network security, DLP, and data protection within enterprise environments.
Experience supporting security and compliance initiatives within regulated environments.
Excellent communication skills with the ability to work effectively across infrastructure, security, compliance, and business teams.
Preferred Certifications
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Microsoft Certified: Security Operations Analyst (SC-200)
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
Microsoft Certified: Identity and Access Administrator (SC-300)
CompTIA Security+
Compensation:
- The annual salary range is about $120,000 to $150,000 based on experience with a 10% annual bonus.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Commuter benefits
- 401(k) and employer match
- 16 days of PTO
- Disability benefits
- Paid parental leave
- Catered Lunches
- Annual Summer & Winter Events